You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
103 lines
2.9 KiB
103 lines
2.9 KiB
5 years ago
|
diff -up libgcrypt-1.5.2/mpi/mpicoder.c.gccopt libgcrypt-1.5.2/mpi/mpicoder.c
|
||
|
|
--- libgcrypt-1.5.2/mpi/mpicoder.c.gccopt 2013-04-18 16:48:42.000000000 +0200
|
||
|
|
+++ libgcrypt-1.5.2/mpi/mpicoder.c 2013-06-20 10:24:57.241510589 +0200
|
||
|
|
@@ -555,16 +555,16 @@ gcry_mpi_print (enum gcry_mpi_format for
|
||
|
|
extra=1;
|
||
|
|
}
|
||
|
|
|
||
|
|
- if (buffer && n > len)
|
||
|
|
- {
|
||
|
|
- /* The provided buffer is too short. */
|
||
|
|
- gcry_free (tmp);
|
||
|
|
- return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
- }
|
||
|
|
if (buffer)
|
||
|
|
{
|
||
|
|
unsigned char *s = buffer;
|
||
|
|
|
||
|
|
+ if (n > len)
|
||
|
|
+ {
|
||
|
|
+ /* The provided buffer is too short. */
|
||
|
|
+ gcry_free (tmp);
|
||
|
|
+ return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
+ }
|
||
|
|
if (extra)
|
||
|
|
*s++ = 0;
|
||
|
|
memcpy (s, tmp, n-extra);
|
||
|
|
@@ -580,12 +580,12 @@ gcry_mpi_print (enum gcry_mpi_format for
|
||
|
|
/* Note: We ignore the sign for this format. */
|
||
|
|
/* FIXME: for performance reasons we should put this into
|
||
|
|
mpi_aprint because we can then use the buffer directly. */
|
||
|
|
- if (buffer && n > len)
|
||
|
|
- return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
if (buffer)
|
||
|
|
{
|
||
|
|
unsigned char *tmp;
|
||
|
|
|
||
|
|
+ if (n > len)
|
||
|
|
+ return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
tmp = _gcry_mpi_get_buffer (a, &n, NULL);
|
||
|
|
if (!tmp)
|
||
|
|
return gpg_error_from_syserror ();
|
||
|
|
@@ -603,14 +603,13 @@ gcry_mpi_print (enum gcry_mpi_format for
|
||
|
|
if( a->sign )
|
||
|
|
return gcry_error (GPG_ERR_INV_ARG);
|
||
|
|
|
||
|
|
- if (buffer && n+2 > len)
|
||
|
|
- return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
-
|
||
|
|
if (buffer)
|
||
|
|
{
|
||
|
|
unsigned char *tmp;
|
||
|
|
unsigned char *s = buffer;
|
||
|
|
|
||
|
|
+ if (n+2 > len)
|
||
|
|
+ return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
s[0] = nbits >> 8;
|
||
|
|
s[1] = nbits;
|
||
|
|
|
||
|
|
@@ -641,16 +640,16 @@ gcry_mpi_print (enum gcry_mpi_format for
|
||
|
|
extra=1;
|
||
|
|
}
|
||
|
|
|
||
|
|
- if (buffer && n+4 > len)
|
||
|
|
- {
|
||
|
|
- gcry_free(tmp);
|
||
|
|
- return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
- }
|
||
|
|
-
|
||
|
|
if (buffer)
|
||
|
|
{
|
||
|
|
unsigned char *s = buffer;
|
||
|
|
|
||
|
|
+ if (n+4 > len)
|
||
|
|
+ {
|
||
|
|
+ gcry_free(tmp);
|
||
|
|
+ return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
+ }
|
||
|
|
+
|
||
|
|
*s++ = n >> 24;
|
||
|
|
*s++ = n >> 16;
|
||
|
|
*s++ = n >> 8;
|
||
|
|
@@ -677,15 +676,15 @@ gcry_mpi_print (enum gcry_mpi_format for
|
||
|
|
if (!n || (*tmp & 0x80))
|
||
|
|
extra = 2;
|
||
|
|
|
||
|
|
- if (buffer && 2*n + extra + !!a->sign + 1 > len)
|
||
|
|
- {
|
||
|
|
- gcry_free(tmp);
|
||
|
|
- return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
- }
|
||
|
|
if (buffer)
|
||
|
|
{
|
||
|
|
unsigned char *s = buffer;
|
||
|
|
|
||
|
|
+ if (2*n + extra + !!a->sign + 1 > len)
|
||
|
|
+ {
|
||
|
|
+ gcry_free(tmp);
|
||
|
|
+ return gcry_error (GPG_ERR_TOO_SHORT);
|
||
|
|
+ }
|
||
|
|
if (a->sign)
|
||
|
|
*s++ = '-';
|
||
|
|
if (extra)
|